2) Start in DOS, or start a DOS session in Windows 95/98/ME.
For Windows NT or Windows 2000 boot from a DOS or Windows 95/98 boot
disk (you can find boot disks at www.AnswersThatWork.com), and run
CMOSPWD from your boot floppy (or another floppy).

3) C: [Enter]
cd \CMOSPWD [Enter]

4) Type CMOSPWD at the DOS prompt and press Enter.

5) CMOSPWD will display a list of possibilities. Use the possibilities
itemised against your BIOS manufacturer.
Remember :

6) If the standard method does not work, then try to kill
the CMOS password with CMOSPWD /K (and press Enter),
and then see if you can get into the CMOS without a password.
If you can, you successfully “killed” the old CMOS password.
DO NOT KILL THE CMOS ON LAPTOPS!

/d to dump cmos in ascii and scan code
/m0010011 to execute module 3,6 and 7

Keyboard:
/kfr French AZERTY
/kde German QWERTY
default is US QWERTY

—————————————————
—————————————————
|Laptops |
—————————————————
—————————————————
On laptops, the password is usually stored in an eeprom on the motherboard,
you need an eeprom programmer (electronic device) to retrieve it.

You can get/buy eeprom programmer in electronic shops or labs, you need
another PC to use it.
You can desolder the eeprom with hot air or you can try to “clip” the
eeprom. With the eeprom programmer, backup your eeprom and run
“cmospwd /d /l eeprom_backup”. If you don’t see the password, you can try
to fill the eeprom with zero or FF, don’t forget the reset the cmos.

—————————————————
—————————————————
|Toshiba |
—————————————————
—————————————————
Differents passwords give the same 32-bit CRC, so CmosPwd can only give one
of them.
To reset the password of an old Toshiba, you can use KeyDisk. (cf my web page)
If this doesn’t work, you can try to build the Toshiba Parallell loopback.
To make a simple device that you connect to your parallell port, a lot of
Toshiba computers remove the password when you boot it up.
The device, named “loopback” by some, could be made out of any
parallell wire with 25pins connectors (db25). You should connect
these pins: 1-5-10, 2-11, 3-17, 4-12, 6-16, 7-13, 8-14, 9-15, 18-25.

What to do if you can’t use cmospwd to clear your cmos ?
Under Dos/Win9x, you can use debug to reset cmos CRC stored at 0x2E-0x2F
debug
-o 70 2E
-o 71 0
-q

What to do if cmospwd don’t work on your PC ?

Try to clear password with cmospwd /k.
If cmospwd /k doesn’t work, password is stored in an EEPROM. Try to find a
reset jumper on your motherboard or contact your PC vendor.
If it works, I can try to discover how passwords are encrypted.
I need to know what Bios you used and
some cmos memory backup with their passwords. (cmospwd /w backupfile)
For passwords, choose
– some 1 and 2-letter passwords
– BBBBBBB
– BBBBBBC
– BBBBBCB
– BBBBCBB
– BBBCBBB
– BBCBBBB
– BCBBBBB
– CBBBBBB